Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: tG4epzI4cyY5osiqynBOLtak4NQN81FfbRxaqdQr7dM=
Subject key identifier: A7:F0:E9:40:0A:D5:FC:A0:68:5F:E2:9F:3D:C8:13:8C:08:11:3F:CC
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 019E8D930CE3B35D62758A17382162124EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0D02
Signing time: Wed 03 Jun 2026 13:01:24 +0000
Manifest this update: Wed 03 Jun 2026 13:01:24 +0000
Manifest next update: Thu 04 Jun 2026 13:01:24 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: QKfBAwCfjDNjlWgk4QflNV/MJu+JQEnrDZElorM3ASk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:93:0c:e3:b3:5d:62:75:8a:17:38:21:62:12:4e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Jun 3 13:01:24 2026 GMT
Not After : Jun 4 13:01:24 2026 GMT
Subject: CN=a7f0e9400ad5fca0685fe29f3dc8138c08113fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:7c:a1:2b:35:b6:96:54:72:66:e4:60:18:
2d:ca:c4:12:2e:73:22:98:5f:13:f6:23:c2:d0:7c:
ea:fb:2e:6b:53:4b:37:31:7f:4d:88:77:50:26:7e:
d0:27:f4:b7:67:35:43:79:cc:83:62:fc:d2:44:15:
23:cc:53:02:7f:4b:52:15:b2:1e:86:fa:93:30:1c:
0f:41:b3:bd:24:54:9a:32:17:57:20:ae:75:dc:d7:
c2:48:18:b1:c2:1e:50:06:dd:75:7b:e8:de:79:6d:
fc:f6:76:9f:5b:e2:1e:fa:3e:6b:e5:b2:9d:01:2c:
ca:7a:36:9b:9e:25:44:12:24:0f:ad:d4:e6:9c:2b:
30:1b:46:1e:a7:4d:2c:32:dc:96:39:b9:4c:79:05:
18:a2:0c:3f:32:6b:61:97:56:16:8b:13:5e:e5:b2:
fe:cf:92:cf:af:99:2a:d7:3f:5c:24:db:62:b6:93:
4a:6b:d6:ca:df:7c:0d:08:3a:d3:ae:31:df:76:4e:
83:12:7e:2a:3f:35:52:bb:3a:2e:8d:1e:91:52:9a:
a7:f1:4a:ec:46:9f:b9:14:17:17:ae:ac:da:52:bf:
40:3e:48:55:8d:1a:8e:50:a6:48:1b:42:2c:37:62:
75:da:c7:3f:36:7e:5e:e5:18:a1:5c:d3:9e:94:0f:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:E9:40:0A:D5:FC:A0:68:5F:E2:9F:3D:C8:13:8C:08:11:3F:CC
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:34:e3:14:4b:70:62:00:70:ac:43:4a:ec:26:fc:75:9c:89:
31:f8:c9:2c:a2:2f:c3:42:b4:e8:9d:d2:ed:3b:f6:22:1d:09:
47:a7:ec:42:6d:f6:c4:82:9a:44:c3:b6:8a:59:4d:5b:fb:43:
ed:cf:79:c7:c9:f2:d6:6f:a6:3f:f2:69:5c:91:2d:c5:dc:54:
00:ed:d6:2e:a2:f1:0f:7f:f1:2b:94:d5:05:23:94:ac:29:4d:
50:ae:78:a1:08:8e:6d:4d:79:af:a7:d0:72:03:aa:f9:9e:12:
50:61:60:2a:12:6f:b3:4b:8b:7c:69:d4:12:99:15:64:c5:24:
54:34:4a:fe:94:1f:02:48:b0:21:4c:04:85:f2:e9:c7:96:0f:
b2:5f:fd:8e:d7:c1:e7:a5:2f:6e:f9:06:a7:95:53:a5:fb:25:
6a:ec:54:92:53:c9:e5:5e:fd:bd:f5:ed:85:f6:4a:21:e7:1f:
2e:03:b1:27:f6:58:31:65:2e:9a:94:d3:35:41:f4:01:55:5a:
15:e6:82:14:ea:13:52:fe:b9:d5:34:fb:18:ba:db:d6:bb:b3:
9a:bc:76:bf:db:34:9d:c4:f4:f2:79:b5:bf:d6:d0:ce:20:76:
3a:95:7a:40:47:84:17:84:66:33:23:c6:2a:7b:0b:d6:20:f6:
58:aa:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:59:36 2026 by rpki-client